PRIVACY NOTICE FOR THE PROCESSING OF SUPPLIER PERSONAL DATA
In accordance with the principles of fairness, lawfulness, transparency, protection of confidentiality, and the rights of the data subject regarding the processing of their data, pursuant to Article 13 of EU Regulation 2016/679, the following information is provided.
DATA CONTROLLER
The Data Controller is ALPENTRANS LOGISTICS S.R.L., represented by the legal representative pro tempore, with headquarters at Via Nazionale, 124 39040 Salorno (BZ), Email: info@alpentrans.com, PEC: amministrazione@pec.alpentrans.com, telephone +39 0471/803200.
PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
The personal data provided may be processed for the following purposes:
- management of the contractual relationship and fulfillment of related obligations;
- administrative-accounting purposes;
- compliance with legal obligations, regulations, and/or orders from Authorities;
- exercise of the controller's rights (e.g., right to defense in court).
The legal basis for processing is based on the performance of the contract and related obligations, as well as the legitimate interest of the controller.
DATA PROCESSING METHOD AND DECISION-MAKING OR PROFILING PROCESS
The processing will also be carried out using electronic and/or automated tools, and in compliance with the regulations in force, all security measures will be adopted to ensure the confidentiality, integrity, and accuracy of the data.
The controller does not use decision-making processes aimed at profiling personal data in any way.
RECIPIENTS AND CATEGORIES OF PERSONAL DATA RECIPIENTS
The data will be processed by employees and other individuals authorized by the Controller to perform its activities, as well as third parties who carry out outsourcing activities on behalf of the Controller as external data processors.
DATA PROCESSING LOCATION
Personal data will generally be processed within the European Union. However, some applications used by the Controller's services may involve the transfer of personal data to the United States. This processing is legitimized pursuant to Article 45 of EU Regulation 2016/679, by virtue of an adequacy decision adopted by the European Commission. Where necessary, the Controller may transfer its data archives to other non-European countries, ensuring that such transfer will only occur to countries offering an adequate level of protection in line with the standards set by current regulations, in compliance with Articles 45, 46, and 49 of EU Regulation 2016/679.
NATURE OF DATA PROVISION
The provision of data is optional; however, failure to provide the necessary data for the execution of the contract or requested service will result in the inability to carry out the Service.
DATA RETENTION PERIOD
Data will be processed for the period necessary to fulfill the purposes mentioned above and in compliance with specific regulations, at least for ten years from the last interaction with the data subject.
DATA SUBJECT RIGHTS REGARDING DATA PROCESSING
Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the EU Regulation, the data subject is informed that:
- they have the right to request access to their personal data, rectification, deletion, restriction of processing, or to object to its processing, and the transfer of their data to another controller, where applicable;
- any rectifications, deletions, or restrictions on processing carried out at the request of the data subject - unless this proves impossible or requires disproportionate effort - will be communicated by the Controller to each data processor to whom the personal data has been disclosed;
- hey have the right to lodge a complaint with the Data Protection Authority by following the procedures and instructions published on the official website of the Authority at www.garanteprivacy.it.
The exercise of rights is not subject to any formalities and is free of charge.
Notice updated as of 14/06/2024.